wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

DATA PRIVACY QUIZ

Total questions: 35

Worksheet time: 40mins

Name
Class
Date
1.

The processing of personal information shall be permitted only if the personal information is necessary and is related to the fulfillment of a contract with the data subject.

a)

TRUE

b)

FALSE

2.

The processing of sensitive personal information and privileged information shall be allowed if it is necessary to protect the life and health of another person.

a)

TRUE

b)

FALSE

3.

The personal information controller shall implement reasonable and appropriate measures to protect personal information against natural dangers such as accidental loss.

a)

TRUE

b)

FALSE

4.

The Commission is not allowed to postpone a notification where it may hinder the progress of a criminal investigation related to a serious breach.

a)

TRUE

b)

FALSE

5.

The undersecretary of each government agency or instrumentality shall be responsible for complying with the security requirements

a)

TRUE

b)

FALSE

6.

If the offender is a corporation, partnership or any juridical person, the penalty shall be imposed upon the responsible officers.

a)

TRUE

b)

FALSE

7.

Personal information must be processed fairly and lawfully.

a)

TRUE

b)

FALSE

8.

The processing of personal information is necessary if it will be used for scientific and statistical research.

a)

TRUE

b)

FALSE

9.

Each personal information controller (PIC) is responsible for personal information under its control or custody.

a)

TRUE

b)

FALSE

10.

The unauthorized processing of personal sensitive information shall be penalized by imprisonment.

a)

TRUE

b)

FALSE

11.

The Commission shall quarterly report to the President and Congress on its activities in carrying out the provisions of this Act.

a)

TRUE

b)

FALSE

12.

The Commission shall ensure at all times the confidentiality of any personal information that comes to its knowledge and possession.

a)

TRUE

b)

FALSE

13.

Issue cease and desist orders, impose a temporary or permanent ban on the processing of personal information.

a)

TRUE

b)

FALSE

14.

This act does not apply to the personal information processed for journalistic, artistic, literary or research purposes

a)

TRUE

b)

FALSE

15.

Sensitive personal information refers to personal information about an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations

a)

TRUE

b)

FALSE

16.

Complete the title of the Data Privacy Act 0f 2012.


"AN ACT PROTECTING INDIVIDUAL PERSONAL INFORMATION IN INFORMATION AND _________________ IN THE GOVERNMENT AND THE PRIVATE SECTOR, CREATING FOR THIS PURPOSE A NATIONAL PRIVACY COMMISSION, AND FOR OTHER PURPOSES."

a)

Management System

b)

Collaboration System

c)

Communication System

d)

Privacy System

17.

According to Section 6 of Extraterritorial Application, Data Privacy Act applies to any of the following, except:

a)

The entity has a link with the Philippines

b)

The entity carries on business in the Philippines

c)

The entity relates to any product from the Philippines

d)

An entity that has a branch, agency, office or subsidiary in the Philippines

18.

The National Privacy commision has the following functions, except:

a)

Receive complaints

b)

Impose a temporary or permanent ban on the processing of personal information

c)

Ensure proper and effective coordination with data privacy regulators

d)

Assist foreign companies doing business abroad to respond to foreign privacy

19.

Personal information must be:

a)

Processed fairly and lawfully

b)

Accurate, relevant and necessary for purposes for which it is to be used

c)

Adequate and not excessive

d)

All answers are correct

20.

The following are the rights of the data subject, except:

a)

Right to be informed

b)

Rights for reasonable access

c)

Right to damages

d)

Rights for false information

21.

If a request is approved, the head of the agency shall limit the access of information to not more than how many records at a time?

a)

800 records

b)

2,500 records

c)

1,000 records

d)

10, 000 records

22.

The following shows different ways on how Data Privacy Act is not followed, except:

a)

Processing Personal Information under authorized access

b)

Malicious Disclosure

c)

Improper Disposal of Personal Information

d)

Accessing Personal Information due to negligence

23.

Implementing rules and regulations must be implemented after how many days after the effectivity of the Act?

a)

60 days

b)

200 days

c)

90 days

d)

70 days

24.

The following are considered sensitive information, except:

a)

individual’s health

b)

individual’s race

c)

individual color

d)

individual gender

25.

Data Privacy Act does not apply to the following, except:

a)

Government employee

b)

Office telephone number

c)

Salary range

d)

Social security number

26.

The following are part of the Organizational Structure of the commission, except:

a)

Chairman of the Commission

b)

Deputy Privacy Commissioners

c)

Undersecretary of the Commission

d)

Deputy Privacy Commissioners

27.

The processing of personal information shall be permitted only when the following condition exist, except:

a)

The processing is necessary for compliance with a legal obligation

b)

The processing is necessary for the purposes of the legitimate interests

c)

The processing of personal information is necessary if it is related to the fulfillment of a contract

d)

The processing is necessary in order to respond to personal emergency

28.

Any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained

a)

Personal information

b)

Personal Information Controller

c)

Private

d)

Privileged information

29.

Any and all forms of data which under the Rules of Court and other pertinent laws

a)

Personal information

b)

Personal Information Controller

c)

Private

d)

Privileged information

30.

It refers to a person or organization who controls the collection, holding, processing or use of personal information

a)

Personal information

b)

Personal Information Controller

c)

Private

d)

Privileged information

31.

It refers to any operation or any set of operations performed upon personal information including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data.

(a)  

32.

A communication by whatever means of any advertising or marketing material which is directed to particular individuals

(a)  

33.

The government agency DICT, has an acronym of:

(a)  

34.

The data subject shall have the right, where personal information is processed by electronic means and in a structured and commonly used format

(a)  

35.

This Act shall take effect fifteen (15) days after its publication in at least two (2) national newspapers of general circulation.

(a)